Block WPForms Submissions Containing Spam Words
Quietly discards WPForms submissions when any field contains a word or phrase from your block list, the same way WPForms treats a filled honeypot.
Opens WPIDE on
Code
$wpide_wpf_spam_words = array( 'seo services', 'backlinks', 'crypto', 'casino', 'guest post', 'rank your website' );
add_filter( 'wpforms_process_honeypot', function ( $honeypot, $fields, $entry, $form_data ) use ( $wpide_wpf_spam_words ) {
if ( $honeypot ) {
return $honeypot;
}
$text = '';
foreach ( (array) $fields as $field ) {
$text .= ' ' . ( isset( $field['value'] ) ? (string) $field['value'] : '' );
}
if ( '' === trim( $text ) && ! empty( $entry['fields'] ) ) {
foreach ( (array) $entry['fields'] as $value ) {
$text .= ' ' . ( is_array( $value ) ? implode( ' ', $value ) : (string) $value );
}
}
foreach ( $wpide_wpf_spam_words as $word ) {
if ( preg_match( '/\b' . preg_quote( $word, '/' ) . '\b/iu', $text ) ) {
return 'Your message contains words we do not accept.';
}
}
return $honeypot;
}, 10, 4 );Notes
Matching is case-insensitive on whole words; WPForms discards matching submissions silently, like its own honeypot, so bots get no hint.
How to add this snippet
- Install WPIDE on your WordPress site (it is free) and open Code Snippets.
- Use snippet above adds it from the library in one click. Or copy the code into a new snippet with the same code type.
- It is added inactive: review the code and settings, then switch it on.